One of the best things about this "I forgot my password" workflow is something you might not think about: it's done through email so people can't easily reset your password out from under you. I know this isn't an uncommon feature, but it's still a nice thing to have.